Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135362e302f32332d3233203d3e20323730333735.roa
File:                     3139302e38392e3135362e302f32332d3233203d3e20323730333735.roa (raw, json)
Hash identifier:          /l2lnp0qoBihOOvNJ53GiEYHkl5SgDA6RE1IDq4spXY=
Subject key identifier:   32:02:BB:27:68:86:08:BB:2F:9A:8B:6F:1C:7D:73:1C:57:19:7B:E9
Certificate issuer:       /CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
Certificate serial:       7FAB0D62903434534D8D80CA94510AEFFCC47729
Authority key identifier: 4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135362e302f32332d3233203d3e20323730333735.roa
Signing time:             Tue 05 Mar 2024 19:53:08 +0000
ROA not before:           Tue 05 Mar 2024 19:48:08 +0000
ROA not after:            Tue 04 Mar 2025 19:53:08 +0000
asID:                     270375
IP address blocks:        190.89.156.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ab:0d:62:90:34:34:53:4d:8d:80:ca:94:51:0a:ef:fc:c4:77:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D4CF41437C0AC8743EF8679C360277C7497ABFC
        Validity
            Not Before: Mar  5 19:48:08 2024 GMT
            Not After : Mar  4 19:53:08 2025 GMT
        Subject: CN=3202BB27688608BB2F9A8B6F1C7D731C57197BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:21:dd:f5:49:4a:01:ee:6c:c3:e8:a9:4a:9f:
                    8a:84:f7:61:c2:1d:7c:0d:90:c3:06:e5:47:aa:0f:
                    56:27:32:6b:f1:8f:96:1d:fc:f5:68:13:22:fd:ff:
                    d6:55:94:b0:dc:84:1f:ab:ef:03:39:af:8e:c7:7a:
                    71:ae:c0:8a:23:62:d8:ea:83:84:40:d7:83:d6:ed:
                    7b:40:28:37:a7:65:a6:ab:fb:56:c0:77:d8:e5:b0:
                    ec:e8:36:33:c9:83:60:bf:28:0d:5d:5c:a8:2f:ff:
                    9f:fa:84:82:4f:db:73:ce:aa:89:be:e7:19:80:3e:
                    3d:5f:73:75:28:e1:dd:b7:ff:58:e9:d1:57:58:08:
                    70:e4:0c:b3:0b:34:1b:54:ac:c5:76:a6:ed:a3:a7:
                    74:17:b0:2b:f6:7b:fd:7c:b8:38:3f:73:2b:2c:e1:
                    a1:d2:69:f8:db:c9:01:84:55:3b:27:ca:94:dd:9a:
                    e9:5a:fa:c9:d5:31:a9:d2:18:43:49:58:df:e0:a0:
                    f9:8a:97:a2:82:60:99:1a:73:b5:37:05:9c:66:63:
                    d6:26:47:2c:a8:77:a8:ed:91:13:de:21:41:83:a8:
                    42:14:6d:30:1e:56:cb:62:ad:f4:c2:2f:67:a0:ac:
                    c4:bd:e8:e8:84:62:b0:91:8a:f7:72:a3:10:bd:51:
                    eb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:02:BB:27:68:86:08:BB:2F:9A:8B:6F:1C:7D:73:1C:57:19:7B:E9
            X509v3 Authority Key Identifier:
                keyid:4D:4C:F4:14:37:C0:AC:87:43:EF:86:79:C3:60:27:7C:74:97:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D4CF41437C0AC8743EF8679C360277C7497ABFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135362e302f32332d3233203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:a9:0e:02:58:63:ce:08:1a:c3:bd:ab:53:e0:9d:c0:fd:06:
         27:29:45:75:87:be:ca:62:3d:90:db:1f:82:57:e3:cd:e2:b5:
         fd:85:ba:e5:77:01:62:74:bc:73:91:cd:a8:db:32:1f:b1:5b:
         4d:4d:f3:2d:7c:fe:bd:5f:12:4d:fb:cf:ed:c2:0c:f5:92:61:
         82:52:36:5b:c5:b5:b7:6b:bb:e2:b7:44:67:48:13:ef:0a:78:
         db:74:9f:8c:7c:2c:3b:b9:2a:80:a8:3f:73:bc:37:95:45:ad:
         18:c3:20:69:b7:5d:f0:04:df:60:c3:55:c7:0e:ee:79:3a:b2:
         e4:e8:62:fc:b3:71:d0:9f:68:e6:a0:64:f8:f4:63:c2:ed:4e:
         79:7a:38:9e:74:89:26:0f:8f:9c:76:59:e6:55:a2:cc:c1:d2:
         a1:b2:42:bb:8b:0b:7a:d3:f6:29:bb:87:7b:55:ba:49:46:d7:
         3a:ec:80:54:06:b7:6a:63:1e:8c:cf:c4:3f:00:3d:9a:cb:59:
         1d:79:56:ba:cd:bf:3a:ac:df:3a:15:9e:1e:15:62:82:a4:f9:
         05:f2:23:5b:40:e7:7e:dc:1c:6e:2e:ed:85:00:1c:96:88:b6:
         83:80:41:8c:37:66:e3:fe:9e:04:a5:f3:f7:35:a9:80:6b:9d:
         50:d9:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:03:11 2025 by rpki-client